We also measure doppler of individual GNSS satellites, together with AGC adjustment counts, Carrier-to-Noise Density Ratio (C/N₀) and other RF indicators.
Strongest indicators remains location drift from a known stationary sensor.
A sky chart of all GNSS satellites in view from a @nzyme.org sensor, together with a computed horizon line.
There is a dip in the horizon line: A building blocking view of the Northern skies.
If a satellite is rising in an “invisible” area of the horizon, we have a spoofing indicator.
A click on the assets reveals all internal and external communication patterns, SSH sessions, VPN connections, TLS information, DNS queries, ...
Every Whisper Finds Its Echo.
3/3/
New assets in your network trigger detection events and fingerprinting is used to detect spoofing attempts. Sources for this logic are IP, DHCP and ARP.
2/3
The new Nzyme - Close Access Denial phase of Ethernet processing gives you an overview of all assets in your network, with zero configuration, processing rules or queries.
1/3
Coming in the next alpha release: Syslog and Webhook actions.
Actions are subscribed to System and Detection events like "Rogue Access Point detected" or "User MFA method has been reset".
As always, sensitive authentication information is transparently PGP encrypted in the Nzyme database.
Super excited that our new website is online! Check it out.
www.nzyme.org
New in the Bluetooth subsystem: Additional device metadata detection/enrichment. Alert rules to follow.
We are excited to be sponsoring BSides Nashville again this year! See you there on May 10th
bsidesnash.org
Nzyme v2.0.0-alpha.16 has been released, featuring several new capabilities and improvements — including drone detection.
www.nzyme.org/blog/project...
Coming in the next alpha release:
Out of the box Cursor-on-Target (CoT) messaging for integration with situational awareness products like the Team Awareness/Assault Kit (TAK/ATAK) and other coalition command and control systems.
Hi! The next alpha (likely coming out in the next 1-2 weeks) will have the functionality.
Waiting for FAA small UAV / Part 107 license to do the last leg of real-world testing.
👀
Now in active trials.
